CVE-2002-2010

NONE EPSS 65.6%

Published Dec 31, 200223y ago · Modified Jun 16, 20262w ago

Published Dec 31, 2002 23y ago

Last Modified Jun 16, 2026 2w ago

Description

Cross-site scripting (XSS) vulnerability in htsearch.cgi in htdig (ht://Dig) 3.1.5, 3.1.6, and 3.2 allows remote attackers to inject arbitrary web script or HTML via the words parameter.

Threat Intelligence

EPSS Exploit Probability

65.6% percentile

Exploit & Patch Status

Public Exploit Known

No Patch Available

Affected Products 4

Vendor	Product	Version	Range
htdig	htdig	3.1.5	any
htdig	htdig	3.1.6	any
htdig	htdig	3.2.0	any
htdig	htdig	3.2.0b3	any

References 3

archives.neohapsis.com http://archives.neohapsis.com/archives/bugtraq/2002-06/0321.html

Exploit
iss.net http://www.iss.net/security_center/static/9433.php
securityfocus.com http://www.securityfocus.com/bid/5091

Remediation

No remediation data recorded yet

Check vendor advisories and the NVD entry for patch availability.